Hi!
Tor Browser 8.0a6 is ready for testing. Bundles can be found on:
https://people.torproject.org/~boklm/builds/8.0a6-build1/
Tor Browser 8.0a6 includes newer versions of Tor (0.3.3.5-rc), OpenSSL
(1.0.2o), HTTPS Everywhere (2018.4.11), NoScript (5.1.8.5).
The GCC we use for building the Windows and Linux version has been
updated to 6.4.0.
We fixed the issue with secure cookies which were not working on http
.onion pages.
Here is the full changelog sinc 8.0a5:
Tor Browser 8.0a6 -- April …
[View More]19 2018
* All platforms
* Update Tor to 0.3.3.5-rc
* Update OpenSSL to 1.0.2o
* Update Torbutton to 1.9.9.1
* Bug 25126: Make about:tor layout responsive
* Translations update
* Update HTTPS Everywhere to 2018.4.11
* Update NoScript to 5.1.8.5
* Bug 21537: Mark .onion cookies as secure
* Bug 21850: Update about:tbupdate handling for e10s
* Bug 25721: Backport patches from Mozilla's bug 1448771
* Linux
* Bug 20283: Tor Browser should run without a `/proc` filesystem.
* Windows
* Bug 13893: Make EMET compatible with Tor Browser
* Build System
* Windows
* Bug 25420: Update GCC to 6.4.0
* Bug 20302: Fix FTE compilation for Windows with GCC 6.4.0
* Linux
* Bug 25304: Update GCC to 6.4.0
Nicolas
[View Less]
Hi All!
Tor Browser 7.5.3 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/7.5.3-build1/
This release contains a security update to Firefox and an updated HTTPS
Everywhere version (2018.3.13). The release is planned for the upcoming
Monday. Please give it a test if you can.
The full changelog since 7.5.2 is:
Tor Browser 7.5.3 -- March 26 2018
* All platforms
* Update Firefox to 52.7.3esr
* Update HTTPS Everywhere to 2018.3.13
* Bug 25339: …
[View More]Adapt build system for Python 3.6 based build procedure
Georg
[View Less]
Hi!
Tor Browser 8.0a3 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/8.0a3-build1/
Tor Browser 8.0a3 contains security updates to Firefox and includes
newer versions of Tor (0.3.3.3), HTTPS Everywhere (2018.2.26), and
obfs4proxy (0.0.7).
Apart from those component updates we are proud that this alpha is the
first one containing Moat, which is a more robust way of getting bridges
from torproject.org using the meek pluggable transport. Please try it
…
[View More]out if you can and report any issues you find!
Here is the full changelog since 8.0a2:
Tor Browser 8.0a3 -- March 13 2018
* All platforms
* Update Firefox to 52.7.0esr
* Update Tor to 0.3.3.3-alpha
* Update Tor Launcher to 0.2.15.1
* Bug 23136: Moat integration (fetch bridges for the user)
* Translations update
* Update HTTPS Everywhere to 2018.2.26
* Bug 25339: Adapt build system for Python 3.6 based build procedure
* Bug 25356: Update obfs4proxy to v0.0.7
* Bug 25147: Sanitize HTML fragments created for chrome-privileged
documents
* Windows
* Bug 25112: No sandboxing on 64-bit Windows <= Vista
Georg
[View Less]
Hi tor-qa!
Tor Browser 7.5.1 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/7.5.1-build3/
Tor Browser 7.5.1 contains security updates to Firefox and includes
newer versions of Tor (0.3.2.10), NoScript (5.1.8.4), and obfs4proxy
(0.0.7).
Moreover, we fixed sandbox incompatibilities for 64bit Windows Vista
users and amended the NoScript whitelist, which unbreaks extension
panels on higher security levels.
Note: We did not include the latest HTTPS …
[View More]Everywhere release in Tor
Browser 7.5.1 as we need to first test its new build system in an alpha
release to make sure we still can build everything reproducibly. We
expect to have this fixed in the next stable release, though. Sorry for
any inconvenience.
Here is the full changelog since 7.5:
Tor Browser 7.5.1 -- March 13 2018
* All platforms
* Update Firefox to 52.7.0esr
* Update Tor to 0.3.2.10
* Update Torbutton to 1.9.8.6
* Bug 24159: Version check does not deal with platform specific checks
* Bug 25016: Remove 2017 donation banner
* Translations update
* Update Tor Launcher to 0.2.14.4
* Bug 25089: Special characters are not escaped in proxy password
* Translations update
* Update NoScript to 5.1.8.4
* Bug 25356: Update obfs4proxy to v0.0.7
* Bug 25000: Add [System+Principal] to the NoScript whitelist
* Windows
* Bug 25112: Disable sandboxing on 64-bit Windows <= Vista
Georg
[View Less]
Hi all!
Tor Browser 7.5 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/7.5-build3/
This is the first stable release in the 7.5 series. Apart from the usual
Firefox security updates it contains some notable improvements compared
to the 7.0 series. Here are the highlights:
1) We ship the first release in Tor's 0.3.2 series, 0.3.2.9.
2) We redesigned parts of the Tor Browser user interface. First, we
improved Tor Launcher allowing users to configure …
[View More]bridges easier and
making the whole bootstrap sequence less confusing and more streamlined.
Second, we enhanced the security slider taking the user experience on
mobile, as shown in Orfox, into account.
3) On the security side we enabled content sandboxing on Windows and
fixed remaining issues on Linux that prevented printing to file from
working properly. Additionally, we improved the compiler hardening on
macOS and fixed holes in the W^X mitigation on Windows.
4) We finally moved away from Gitian/tor-browser-bundle as the base of
our reproducible builds environment. Over the past weeks and months
rbm/tor-browser-build got developed making it much easier to reproduce
Tor Browser builds and to add reproducible builds for new platforms and
architectures. This will allow us to ship 64bit bundles for Windows
(currently in the alpha series available) and bundles for Android at the
same day as the release for the current platforms/architectures is
getting out.
Please give the bundles a try if you can and give us feedback in case
things break. We are especially interested in hearing back from Windows
users about possible issues with the sandboxing part.
The full changelog since Tor Browser 7.0.11 is:
Tor Browser 7.5 -- January 23 2018
* All Platforms
* Update Firefox to 52.6.0esr
* Update Tor to 0.3.2.9
* Update OpenSSL to 1.0.2n
* Update Torbutton to 1.9.8.5
* Bug 21847: Update copy for security slider
* Bug 21245: Add da translation to Torbutton and keep track of it
* Bug 24702: Remove Mozilla text from banner
* Bug 10573: Replace deprecated nsILocalFile with nsIFile (code
clean-up)
* Translations update
* Update Tor Launcher to 0.2.14.3
* Bug 23262: Implement integrated progress bar
* Bug 23261: implement configuration portion of new Tor Launcher UI
* Bug 24623: Revise "country that censors Tor" text
* Bug 24624: tbb-logo.svg may cause network access
* Bug 23240: Retrieve current bootstrap progress before showing
progress bar
* Bug 24428: Bootstrap error message sometimes lost
* Bug 22232: Add README on use of bootstrap status messages
* Bug 10573: Replace deprecated nsILocalFile with nsIFile (code
clean-up)
* Translations update
* Update HTTPS Everywhere to 2018.1.11
* Update NoScript to 5.1.8.3
* Bug 23104: CSS line-height reveals the platform Tor Browser is
running on
* Bug 24398: Plugin-container process exhausts memory
* Bug 22501: Requests via javascript: violate FPI
* Bug 24756: Add noisebridge01 obfs4 bridge configuration
* Windows
* Bug 16010: Enable content sandboxing on Windows
* Bug 23230: Fix build error on Windows 64
* OS X
* Bug 24566: Avoid white flashes when opening dialogs in Tor Browser
* Bug 23025: Add some hardening flags to macOS build
* Linux
* Bug 23970: Make "Print to File" work with sandboxing enabled
* Bug 23016: "Print to File" is broken on some non-english Linux systems
* Bug 10089: Set middlemouse.contentLoadURL to false by default
* Bug 18101: Suppress upload file dialog proxy bypass (linux part)
* Android
* Bug 22084: Spoof network information API
* Build System
* All Platforms
* Switch from gitian/tor-browser-bundle to rbm/tor-browser-build
* Windows
* Bug 22563: Update mingw-w64 to fix W^X violations
* Bug 20929: Bump GCC version to 5.4.0
* Linux
* Bug 20929: Bump GCC version to 5.4.0
* Bug 23892: Include Firefox and Tor debug files in final build
directory
* Bug 24842: include libasan.so.2 and libubsan.so.0 in debug builds
Georg
[View Less]
Hi!
Tor Browser 8.0a1 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/8.0a1-build3/
Tor Browser 8.0a1 is the first alpha release in the 8.0 series. Apart
from the usual Firefox security updates we have included the new stable
Tor, 0.3.2.9, and updated Torbutton and Tor Launcher to the same version
Tor Browser 7.5 is about to ship.
We added a new MAR signing key following our plan to yearly rotate one
of our update signing keys and included a patch …
[View More]contributed by ffmancera
(thanks!) dealing with possible fingerprinting by checking video
decoding performance: before Tor Browser 8.0a1 users were getting videos
in a different format depending on the performance of the decoding.
On the build side it is noteworthy that starting with this alpha release
all bundles are built on some Debian version. If you notice some issues
on Windows (those bundles were built previously on Ubuntu Precise), let
us know.
The full changelog from 7.5a10 is:
Tor Browser 8.0a1 -- January 23 2018
* All Platforms
* Update Firefox to 52.6.0esr
* Update Tor to 0.3.2.9
* Update Torbutton to 1.9.8.5
* Bug 21245: Add da translation to Torbutton and keep track of it
* Bug 24702: Remove Mozilla text from banner
* Translations update
* Update Tor Launcher to 0.2.14.3
* Translations update
* Update HTTPS Everywhere to 2018.1.11
* Bug 24756: Add noisebridge01 obfs4 bridge configuration
* Bug 23916: Add new MAR signing key
* Bug 22548: Firefox downgrades VP9 videos to VP8 for some users
* Windows
* Bug 24197: Fix win64 sandbox compile issues
* Build System
* Windows
* Bug 18691: switch Windows builds from precise to jessie
* Linux
* Bug 23892: Include Firefox and Tor debug files in final build
directory
* Bug 24842: include libasan.so.2 and libubsan.so.0 in debug builds
Georg
[View Less]
Hi all!
Tor Browser 7.0.10 is ready for testing. Bundles can be found on:
https://people.torproject.org/~boklm/builds/7.0.10-build2/
This release includes security updates for Firefox (52.5.0esr) and a new
Tor stable version (0.3.1.8), the second one in the 0.3.1 series. In
addition to that we updated the HTTPS Everywhere and NoScript extensions
we ship. For Windows users we backported patches from the alpha series
that update the msvcr100.dll runtime library we include and which should
make …
[View More]Tor Browser more robust against crashes due to misbehvaing third
party software.
The full changelog since Tor Browser 7.0.9 is:
Tor Browser 7.0.10 -- November 14 2017
* All Platforms
* Update Firefox to 52.5.0esr
* Update Tor to 0.3.1.8
* Update Torbutton to 1.9.7.10
* Bug 23997: Add link to Tor Browser manual for de, nl, tr, vi
* Translations update
* Update HTTPS-Everywhere to 2017.10.30
* Bug 24178: Use make.sh for building HTTPS-Everywhere
* Update NoScript to 5.1.5
* Bug 23968: NoScript icon jumps to the right after update
* Windows
* Bug 23582: Enable the Windows DLL blocklist for mingw-w64 builds
* Bug 23396: Update the msvcr100.dll we ship
* Bug 24052: Block file:// redirects early
Georg
[View Less]
Hi!
Tor Browser 7.0.6 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/7.0.6-build3/
This release includes security updates for Firefox (52.4.0esr) and a new
Tor stable version (0.3.1.7), the first one in the 0.3.1 series. In
addition to that we updated the HTTPS Everywhere and NoScript extensions
we ship. Moreover, we fixed minor usability issues and a bug which,
under particular circumstances, caused tabs to crash after closing one.
The full …
[View More]changelog since Tor Browser 7.0.5 is:
Tor Browser 7.0.6 -- September 26 2017
* All Platforms
* Update Firefox to 52.4.0esr
* Update Tor to 0.3.1.7
* Update Torbutton to 1.9.7.7
* Bug 22542: Security Settings window too small on macOS 10.12 (fixup)
* Bug 20375: Warn users after entering fullscreen mode
* Update HTTPS-Everywhere to 2017.9.12
* Update NoScript to 5.0.10
* Bug 21830: Copying large text from web console leaks to /tmp
* Bug 23393: Don't crash all tabs when closing one tab
* OS X
* Bug 23404: Add missing Noto Sans Buginese font to the macOS whitelist
Georg
[View Less]
Hi all!
Tor Browser 7.5a5 is ready for testing. Bundles can be found on:
https://people.torproject.org/~gk/builds/7.5a5-build4/
Besides the usual Firefox security nd extensions updates this alpha
contains a bunch of long-awaited features:
1) We ship Tor 0.3.2.1-alpha, the first alpha release in the 0.3.2
series, with support for next generations onion services and a new
circuit scheduler, KIST.[1]
2) Thanks to the work of Jed Davis we are able to ship a content sandbox
for Linux users. …
[View More]While the content sandbox is disabled in Firefox 52 ESR
versions, which Tor Browser is based on, backported patches allow us to
protect our Linux users with the same mechanisms that are provided to
regular Firefox users.
3) The content sandbox is enabled for Windows users as well. While we
still need to clean up our workarounds to get the sandboxing code to
work with our mingw-w64 compiler, we think the enabled sandbox is ready
for a wider testing in our alpha series. Please give it a try if you can.
The full changelog since Tor Browser 7.5a4 is:
Tor Browser 7.5a5 -- September 27 2017
* All Platforms
* Update Firefox to 52.4.0esr
* Update Tor to 0.3.2.1-alpha
* Update Torbutton to 1.9.8.1
* Bug 20375: Warn users after entering fullscreen mode
* Bug 22989: Fix dimensions of new windows on macOS
* Bug 23526: Add 2017 Donation banner text
* Bug 23483: Donation banner on about:tor for 2017 (testing mode)
* Translations update
* Update Tor Launcher to 0.2.13
* Bug 23240: Retrieve current bootstrap progress before showing
progress bar
* Bug 22232: Add README on use of bootstrap status messages
* Translations update
* Update HTTPS-Everywhere to 2017.9.12
* Update NoScript to 5.0.10
* Update sandboxed-tor-browser to 0.0.13
* Bug 23393: Don't crash all tabs when closing one tab
* Bug 23166: Add new obfs4 bridge to the built-in ones
* Bug 23258: Fix broken HTTPS-Everywhere on higher security levels
* Bug 21270: NoScript settings break WebExtensions add-ons
* Bug 23104: CSS line-height reveals the platform Tor Browser is
running on
* Windows
* Bug 16010: Enable content sandboxing on Windows
* Bug 23582: Enable the Windows DLL blocklist for mingw-w64 builds
* Bug 23396: Update the msvcr100.dll we ship
* Bug 23230: Fix build error on Windows 64
* OS X
* Bug 23404: Add missing Noto Sans Buginese font to the macOS whitelist
* Linux
* Bug 10089: Set middlemouse.contentLoadURL to false by default
* Bug 22692: Enable content sandboxing on Linux
* Bug 18101: Suppress upload file dialog proxy bypass (linux part)
* Build System
* All Platforms
* Switch from gitian/tor-browser-bundle to rbm/tor-browser-build
Georg
[1]
https://blog.torproject.org/tor-0321-alpha-released-support-next-gen-onion-…
[View Less]
Hi!
Tor Browser 7.5a4 is ready for testing. Bundles can be found on:
https://people.torproject.org/~boklm/builds/7.5a4-build4/
This release features updates to a lot of Tor Browser components. Apart
from the usual Firefox update (to 52.3.0esr) we include a new Tor alpha
release (0.3.1.5-alpha) + an updated OpenSSL (1.0.2l), HTTPS-Everywhere
(5.2.12) and NoScript (5.0.8.1). We also update sandboxed-tor-browser
(to 0.0.12).
The major new features in this alpha release are selfrando support …
[View More]for
32bit Linux systems[1], Snowflake support for macOS[2], and a patch that
fixes a lot of our problems with the external helper app dialog. In
particular, downloading files via the pdf viewer should work again.[3]
As we do in the stable series, we also avoid scary warnings popping up
when entering passwords on .onion sites without a TLS certificate.[4]
We are also testing a better Tor Browser hardening on Windows by using a
newer compiler for our Windows builds. If you encounter any issues that
could be caused by the new compiler, we want to know about it!
The full changelog since Tor Browser 7.5a2 (for Linux since Tor Browser
7.5a3) is:
Tor Browser 7.5a4 -- August 9 2017
* All Platforms
* Update Firefox to 52.3.0esr
* Update Tor to 0.3.1.5-alpha
* Update OpenSSL to 1.0.2l
* Update Torbutton to 1.9.8
* Bug 22610: Avoid crashes when canceling external helper app
related downloads
* Bug 22472: Fix FTP downloads when external helper app dialog is shown
* Bug 22471: Downloading pdf files via the PDF viewer download
button is broken
* Bug 22618: Downloading pdf file via file:/// is stalling
* Bug 22542: Resize slider window to work without scrollbars
* Bug 21999: Fix display of language prompt in non-en-US locales
* Bug 18193: Don't let about:tor have chrome privileges
* Bug 22535: Search on about:tor discards search query
* Bug 21948: Going back to about:tor page gives "Address isn't
valid" error
* Code clean-up
* Translations update
* Update Tor Launcher to 0.2.12.3
* Bug 22592: Default bridge settings are not removed
* Translations update
* Update HTTPS-Everywhere to 5.2.21
* Update NoScript to 5.0.8.1
* Bug 22362: Remove workaround for XSS related browser freezing
* Bug 22067: NoScript Click-to-Play bypass with embedded videos and
audio
* Update sandboxed-tor-browser to 0.0.12
* Bug 22610: Avoid crashes when canceling external helper app related
downloads
* Bug 22472: Fix FTP downloads when external helper app dialog is shown
* Bug 22471: Downloading pdf files via the PDF viewer download button
is broken
* Bug 22618: Downloading pdf file via file:/// is stalling
* Bug 21321: Exempt .onions from HTTP related security warnings
* Bug 21830: Copying large text from web console leaks to /tmp
* Bug 22073: Disable GetAddons option on addons page
* Bug 22884: Fix broken about:tor page on higher security levels
* Bug 22829: Remove default obfs4 bridge riemann.
* Windows
* Bug 21617: Fix single RWX page on Windows (included in 52.3.0esr)
* OS X
* Bug 22831: Enable Snowflake for mac
* Linux
* Bug 22832: Don't include monthly timestamp in libwebrtc build output
* Bug 20848: Deploy Selfrando in 32bit Linux builds
* Build system
* Windows
* Bug 22563: Update mingw-w64 to fix W^X violations
* Bug 20929: Bump GCC version to 5.4.0
* Linux
* Bug 20929: Bump GCC version to 5.4.0
Georg
[1] https://trac.torproject.org/projects/tor/ticket/20848
[2] https://trac.torproject.org/projects/tor/ticket/22831
[3] https://trac.torproject.org/projects/tor/ticket/22471
[4] https://trac.torproject.org/projects/tor/ticket/21321
[View Less]